Deadlock in rtllib_beacons_stop() in drivers: staging: rtl8192e
Summary
GSD-2022-1003211: drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop(). Affects Kernel versions < fef451f0fbbe85dbd2962b18379d02e2965610db. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rtl8192e driver is a staging driver in the Linux Kernel that provides support for Realtek RTL8192E wireless network adapters. It is responsible for managing the functionality of these adapters, including handling beacon frames. Beacon frames are used in wireless networks to broadcast information about the network to connected devices. The rtllib_beacons_stop() function in the driver is responsible for stopping the transmission of beacon frames. However, a deadlock vulnerability has been discovered in this function.
Vulnerability Detail
The deadlock vulnerability in rtllib_beacons_stop() can be triggered when multiple threads attempt to stop the transmission of beacon frames simultaneously. This can lead to a situation where the threads are waiting for each other to release resources, resulting in a deadlock. An attacker could potentially exploit this vulnerability to cause a denial-of-service condition, impacting the availability of the wireless network functionality. The vulnerability has been fixed in Linux Kernel version v5.15.47 by commit fef451f0fbbe85dbd2962b18379d02e2965610db.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the fix by updating the Linux Kernel.
Conclusion
In conclusion, the rtl8192e driver in the Linux Kernel is vulnerable to a deadlock in the rtllib_beacons_stop() function. This vulnerability can be mitigated by updating the Linux Kernel to version v5.15.47 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a deadlock situation, causing a denial-of-service condition and impacting the availability of the wireless network functionality.
No, this vulnerability requires local access to the system.
There are no known instances of this vulnerability being exploited in the wild.
Yes, the vulnerability has been fixed in Linux Kernel version v5.15.47 by commit fef451f0fbbe85dbd2962b18379d02e2965610db.
More information about this vulnerability can be found in the references link provided in the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
